

Mon Dec 30 01:39:29 2013
Command line: TestDisk

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=8010194944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=31440961536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1025507328
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=8010194944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=31440961536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1025507328
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=208053207040
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=209715200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=1025475072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=31436832768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=8009777664
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=119821828096
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30394 255 63, sector size=512 - SAMSUNG HD253GJ, S/N:20202020202032534336394a4230343234393234, FW:1AJ10001
Disk /dev/sdb - 8010 MB / 7639 MiB - CHS 973 255 63, sector size=512 - Kingston DT 101 G2, FW:1.00
Disk /dev/sdc - 31 GB / 29 GiB - CHS 3822 255 63, sector size=512 - Kingston DataTraveler 2.0, S/N:5B0DE2514599, FW:PMAP
Disk /dev/sdd - 1025 MB / 978 MiB - CHS 124 255 63, sector size=512 - Corsair Flash Voyager, FW:1.00
Disk /dev/sde - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - KINGSTON  SH103S3120G, S/N:152D20337A0C

Partition table type (auto): Intel
Disk /dev/sde - 120 GB / 111 GiB - KINGSTON  SH103S3120G
Partition table type: Intel
A new copy of MBR code has been written.
You have to reboot for the change to take effect.

TestDisk exited normally.



Mon Dec 30 01:42:24 2013
Command line: TestDisk

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=31440961536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=8010194944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=1025507328
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=31440961536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=8010194944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1025507328
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=208053207040
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=209715200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=1025475072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=31436832768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=8009777664
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=119821828096
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30394 255 63, sector size=512 - SAMSUNG HD253GJ, S/N:20202020202032534336394a4230343234393234, FW:1AJ10001
Disk /dev/sdb - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - KINGSTON  SH103S3120G, S/N:152D20337A0C
Disk /dev/sdc - 31 GB / 29 GiB - CHS 3822 255 63, sector size=512 - Kingston DataTraveler 2.0, S/N:5B0DE2514599, FW:PMAP
Disk /dev/sdd - 8010 MB / 7639 MiB - CHS 973 255 63, sector size=512 - Kingston DT 101 G2, FW:1.00
Disk /dev/sde - 1025 MB / 978 MiB - CHS 124 255 63, sector size=512 - Corsair Flash Voyager, FW:1.00

Partition table type (auto): Intel
Disk /dev/sdb - 120 GB / 111 GiB - KINGSTON  SH103S3120G
Partition table type: Intel

Analyse Disk /dev/sdb - 120 GB / 111 GiB - CHS 14593 255 63
Geometry from i386 MBR: head=255 sector=63


test_FAT()
 1 P FAT16 >32M               0  32 33    25 159  6     409600
sector_size  0
cluster_size 0
reserved     0
fats         0
dir_entries  0
sectors      0
media        00
fat_length   0
secs_track   0
heads        0
hidden       0
total_sect   0
check_part_i386 failed for partition type 06
NTFS at 25/159/7
Current partition structure:
Invalid FAT boot sector
 1 P FAT16 >32M               0  32 33    25 159  6     409600
 1 P FAT16 >32M               0  32 33    25 159  6     409600
 2 * HPFS - NTFS             25 159  7 14593  33 32  234027008
Backup partition structure
partition_save

search_part()
Disk /dev/sdb - 120 GB / 111 GiB - CHS 14593 255 63
NTFS at 25/159/7
filesystem size           234027008
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               14626687
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             25 159  7 14593  33 32  234027008
     NTFS, blocksize=4096, 119 GB / 111 GiB
file_pread(5,2,buffer,234442752(14593/98/34)) lseek err Invalid argument
file_pread(5,1,buffer,234442752(14593/98/34)) lseek err Invalid argument
file_pread(5,8,buffer,234441728(14593/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,234441728(14593/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,234441856(14593/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,234441984(14593/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,234442112(14593/88/24)) lseek err Invalid argument
file_pread(5,8,buffer,234442240(14593/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,234442368(14593/92/28)) lseek err Invalid argument
file_pread(5,8,buffer,234442496(14593/94/30)) lseek err Invalid argument
file_pread(5,8,buffer,234442624(14593/96/32)) lseek err Invalid argument
file_pread(5,1,buffer,234442751(14593/98/33)) lseek err Invalid argument
file_pread(5,1,buffer,234442752(14593/98/34)) lseek err Invalid argument
file_pread(5,14,buffer,234442753(14593/98/35)) lseek err Invalid argument
file_pread(5,3,buffer,234442767(14593/98/49)) lseek err Invalid argument
file_pread(5,3,buffer,234442814(14593/99/33)) lseek err Invalid argument
file_pread(5,8,buffer,234442830(14593/99/49)) lseek err Invalid argument
file_pread(5,11,buffer,234442877(14593/100/33)) lseek err Invalid argument
file_pread(5,2,buffer,234444799(14593/131/2)) lseek err Invalid argument

Results
   * HPFS - NTFS             25 159  7 14593  33 32  234027008
     NTFS, blocksize=4096, 119 GB / 111 GiB

interface_write()
 1 * HPFS - NTFS             25 159  7 14593  33 32  234027008

search_part()
Disk /dev/sdb - 120 GB / 111 GiB - CHS 14593 255 63
NTFS at 25/159/7
filesystem size           234027008
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               14626687
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             25 159  7 14593  33 32  234027008
     NTFS, blocksize=4096, 119 GB / 111 GiB
file_pread(5,16,buffer,8222720(511/214/24)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8222720(511/214/24)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8222719(511/214/23)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8222721(511/214/25)) ReadFile Data error (cyclic redundancy check).

file_pread(5,14,buffer,8222722(511/214/26)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,8222736(511/214/40)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,8222783(511/215/24)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,8222799(511/215/40)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,8222846(511/216/24)) ReadFile Data error (cyclic redundancy check).

file_pread(5,2,buffer,8224768(511/246/56)) ReadFile Data error (cyclic redundancy check).

file_pread(5,2,buffer,8224527(511/243/4)) ReadFile Data error (cyclic redundancy check).

file_pread(5,2,buffer,8224590(511/244/4)) ReadFile Data error (cyclic redundancy check).

file_pread(5,2,buffer,8224653(511/245/4)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8224767(511/246/55)) ReadFile Data error (cyclic redundancy check).

file_pread(5,14,buffer,8224770(511/246/58)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,8224784(511/247/9)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,8224831(511/247/56)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,8224847(511/248/9)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,8224894(511/248/56)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,8225279(511/254/63)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8225279(511/254/63)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8225280(512/0/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,15,buffer,8225281(512/0/2)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,8225296(512/0/17)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,8225343(512/1/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,8225359(512/1/17)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,8225406(512/2/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,8225346(512/1/4)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8225346(512/1/4)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,8225351(512/1/9)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,8225422(512/2/17)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,8225469(512/3/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,8225349(512/1/7)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,8225349(512/1/7)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,112011343(6972/97/53)) ReadFile The system cannot find the file specified.

file_pread(5,1,buffer,112011343(6972/97/53)) ReadFile The system cannot find the file specified.

file_pread(5,11,buffer,112011390(6972/98/37)) ReadFile The system cannot find the file specified.


...

file_pread(5,3,buffer,234377232(14589/78/34)) ReadFile The specified network resource or device is no longer available.

file_pread(5,3,buffer,234377279(14589/79/18)) ReadFile The specified network resource or device is no longer available.

file_pread(5,8,buffer,234377295(14589/79/34)) ReadFile The specified network resource or device is no longer available.

file_pread(5,11,buffer,234377342(14589/80/18)) ReadFile The specified network resource or device is no longer available.

file_pread(5,2,buffer,234379264(14589/110/50)) ReadFile The specified network resource or device is no longer available.

file_pread(5,1,buffer,234379263(14589/110/49)) ReadFile The specified network resource or device is no longer available.

file_pread(5,14,buffer,234379266(14589/110/52)) ReadFile The specified network resource or device is no longer available.

file_pread(5,3,buffer,234379280(14589/111/3)) ReadFile The specified network resource or device is no longer available.

file_pread(5,3,buffer,234379327(14589/111/50)) ReadFile The specified network resource or device is no longer available.

file_pread(5,8,buffer,234379343(14589/112/3)) ReadFile The specified network resource or device is no longer available.

file_prError reading bootsector: Invalid argument.
Failed to startup volume: Invalid argument.
Error reading bootsector: Invalid argument.
Error reading bootsector: Invalid argument.
Failed to startup volume: Invalid argument.
Error reading bootsector: Invalid argument.
